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Be it known that we, Graham Strachan, a citizen of Great Britain, residing at 10 
Southwold Close, Aylesbury, Buckinghamshire, HP21 4EZ, England, Paul J Moran, 
a citizen of the Republic of Ireland, residing at The Bye, 120 Green End Road, Hemel 
Hempstead, Hertfordshire, HP1 1RT, England, David Capon, a citizen of Great Britain, 
residing at 2 St Margarets Way, Leverstock Green, Hemel Hempstead, Hertfordshire, HP2 
4PA, England and John P Stubley, a citizen of Great Britain, residing at 105 The Park, 
Redbourn, St Albans, Hertfordshire, AL3 7LT, England, have invented new and useful 
improvements in: 

PACKET-SWITCHED NETWORK AND NETWORK SWITCHES HAVING A 
NETWORK LAYER FORWARDING ACTION PERFORMED BY DATA LINK 
SWITCHING 

of which the following is a specification: 
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PACKET-SWITCHED NETWORK AND NETWORK SWITCHES HAVING A 
NETWORK LAYER FORWARDING ACTION PERFORMED BY DATA 

LINK SWITCHING 

5 Field of the Invention 

This invention relates to packet-switched communication networks, particularly 
Ethernet-type networks. The invention more particularly relates to achieving efficiency 
of operation in a complex network, such as one having a multiplicity of subnets or 
10 virtual local area networks, and more particularly to the reduction of unnecessary 

traffic between a core router and an edge switch wherein an edge switch is required to 
switch packets both between different entities on the same subnet but also between 
entities on different subnets. 

15 Background to the Invention 

Broadly speaking, apart from the media employed for the conveyance of data between 
devices, data networks are composed of data terminal equipment (DTE) which 
constitute the sources and ultimate destinations of data on the network, and switching 

20 devices which perform, as explained further below, both bridging and routing, and 

which fall into generally two categories, namely edge devices and core devices. 
Herein, 'edge device' is intended to mean a switching device which is the first 
encountered by packets on dispatch from data terminal equipment and/or the last 
encountered by a packet before it reaches its ultimate data terminal equipment. Herein 

25 'core device 5 is intended to refer to a switching device which is separated from data 

terminal equipment by an edge device. 

Packet switching between members of the same subnet or virtual local area network 
(VLAN) is commonly performed at the data link or media access control (MAC) level, 
30 often called 'layer 2' switching or bridging because the relevant (data link) layer in the 

open system's interconnection (OSI) model is the 'second' layer. Switching at this 
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layer is normally between members of the same subnet, and only the layer 2 (MAC) 
address information in a packet is required. 

Data packets of the kind employed in the present invention will normally have a 
5 format that includes a MAC address header, comprising a MAC source address 

(identifying the device from which the packet has come) and a MAC destination 
address (indicating the device to which the packet should be forwarded). They will 
also include an IP (internet protocol) header which typically includes an IP or network 
source address and a network destination address. As these names imply, MAC 
10 addresses are used to determine the device to which a packet should be sent whereas a 

network address identifies the network to which the packet should be sent. 

As indicated above, layer 2 switching, normally performed between members of the 
same subnet, does not normally require any change in the header data of a packet. 

15 When a switching device receives a packet, it will perform a look-up in a 'layjer 21-. 

database which will contain an entry including the relevant destination address, and 
(for example) the port forwarding data, typically the number of the port from which 
the packet should be forwarded to reach that destination of the same subnet. It may 
also have a field which identifies that subnet. However, routing between different 

20 subnets is a more complex activity and usually requires recourse to a routing table 

which as well as the network destination address will include an identification of the 
relevant subnet and a MAC address which will have to be applied to the packet to take 
it on the next hop towards its destination. Routers commonly also perform various 
other functions which are not directly relevant to the present invention. 

25 

Summary of the Invention 

In a layer 3 IP network, that is to say a network having a multiplicity of subnets and 
requiring IP switching, all traffic between subnets will normally travel from the edge 
30 of the network into a core where it will be routed and sent out again to the edge of the 

network. In some cases the source and destination stations might be connected to the 
same layer 2 edge device. 
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The basis of the present invention is the avoidance of an unnecessary return journey of 
a packet between a layer 2 edge device and the layer 3 core, thereby conserving both 
up-link and core bandwidth. The edge device can be provided with sufficient addresses 
5 to be able to forward the packet by means of a layer 3 look-up if both the source and 

destination end stations are on different sub-nets but are local to it but to switch 
(bridge) the packet at layer 2 up to the layer 3 core if they are not. 

Further objects and features of the present invention will be apparent from the 
10 following detailed description with reference to the drawings. 

Brief Description of the Drawings 

Figure 1 is a simplified schematic diagram of a switch. 

15 

Figure 2 is a schematic diagram of a router. 
Figure 3 is a diagram illustrating a data packet. 
20 Figure 4 illustrates a fragment of a network. 

Figure 5 illustrates a known form of edge switching. 

Figure 6 illustrates one switching process according to the invention 

25 

Figure 7 illustrates the fragmentary network of Figure 4 operated according to the 
present invention. 



Figure 8 illustrates a routing table. 

30 
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Description of the Preferred Embodiments 

Figure 1 of the drawings is a simplified schematic representation of an edge device ( a 
5 switch) which can be used in the present invention. For the most part, the device 10 

shown in Figure 1 is of known form; however, as will be seen, it is necessary 
according to the invention that the device 10 should be capable of switching at layer 2 
(employing media access control address data) as well as switching at layer 3 (utilising 
network address data). Also, the look-ups are interlinked, either in hardware or 

10 software as will be described later. Although switches which can switch according to 

both layer 2 and layer 3 information are known, in essence switches of that nature will 
examine the MAC destination address to determine whether the packet should be 
switched at layer 2 or layer 3 depending on whether the MAC destination address is 
identified with layer 3 switching.. The difference between the switch in Figure 1 and 

15 known switches will become more apparent after a discussion of Figures 5 to 7. - 

In order to provide a general view of the organisation of the switch, there follows a 
brief description of Figure 1. The switch 10 in Figure 1 will have a multiplicity of 
ports, herein represented as merely four ports (instead of a typical number such as 

20 twelve or twenty-four). Each of the ports is connected to a port ASIC, which will 

perform initial and final processing on packets and typically contains the physical sub- 
layer and data link sub-layer (or MAC). A system of buses is represented in Figure 1 
merely by a bus 15. Typically, packets received by any of the ports 11 to 14 will be 
stored in memory 16 while the headers of the packets are processed in order, for 

25 example, to perform look-ups with the aid of look-up databases 17 which can be 

accessed by a look-up engine 18. For convenience this engine 18 is shown as 
comprising a layer 2 look-up engine 18a (L2 LU) and a layer 3 look-up engine 18b 
(L3 LU). The engine 18a will have recourse to a layer 2 look-up table 17a, containing 
entries accessed by media access control addresses and yielding forwarding 

30 information such as port numbers, whereas the engine 18b will have recourse to layer 

3 (routing) tables 17b and 17c, containing entries of network addesses and 
corresponding forwarding information, i.e known routes and possible default routes. 
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As will become apparent some embodiments will need to preserve a look-up result 
from the layer 2 look-up even though a layer 3 look-up is performed. 

The device includes a processor represented by a CPU 19. 

5 

The database or databases 17 (whether the address and forwarding data in the database 
is in one table or split into a number of tables 17a to 17b is not important) contains 
various types of information which will be more particularly described below. 

10 A switch of the kind shown in Figure 1 may be represented in practice by a switch 

type 4400 made by 3Com Corporation. Such a switch is 'stackable' in that it can be 
put into a cascade connection with other (similar) switches to form a single switch 
entity. One purpose of this is to provide a switch with a larger number of ports that a 
single switch in a simple manner not requiring reorganisation of the network generally. 

15 

Figure 2 illustrates a typical router of the kind which is intended for use as a core 
router in the present invention. This may also be a stackable device as described for 
example in GB-2386524-A. 

20 The router unit 20 in Figure 2 has a multiplicity of ordinary or 'front panel' ports 21 

and a 'cascade' port 22. The unit includes at least one and usually a multiplicity of 
(hardware) bridges or layer 2 switches 23. Each port 21 is connected to at least one of 
the bridges 23 and the or each cascade port 22 is connected to all the bridges or to a 
'logical' internal port connected to all the bridges 23. The unit includes a router 24 

25 which has at least two, and in the illustrated example three, router interfaces 25. Each 

router interface 25 is connected to one bridge only, although each bridge may be 
connected to more than one router interface 25. For each interface there is some means 
such as a register storing a MAC address and a network (IP) address for the interface. 
For controlling the bridges and the router there is a processor constituted by a CPU 26 

30 which has recourse, by means of an appropriate memory system, to a management 
agent 27 and a routing protocol 28. The routing protocol controls routing tables 29. 
Also embedded in the unit, in for example an interface 30 for the management agent, 
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are the unit's normal addresses, i.e. its MAC address and its network (IP) address. 
These addresses are used for the management of the router, for example by an external 
network supervisor, and would according to prior practice be supplied by the CPU to 
the router interfaces. 

5 

Although 'stacking' is not directly relevant to the present invention, a router of the 
kind shown in Figure 2 can be stacked and organised so that the stack has a lead router 
and subordinate routers in the manner described in GB patent application 0202425.5 

10 Figure 3 illustrates schematically for the sake of completeness one example of a packet 

30 which is employed in an Ethernet network. The various segments include a 'start of 
frame 1 SOF 31, a MAC address (layer-2) segment comprising a destination MAC 
address 32 and a source MAC address 33, a VLAN tag (comprising a tag header and a 
field identifying the VLAN (i.e. subnet), a c type' field 35 (having the value 0 x 0800 

15 for IP packets), network or internet protocol (layer-3) segment 36 comprising a 

network destination address (IPDA) and a network source address (IPSA), user data 
(i.e. payload) 37, a cyclic redundancy code (CRC) segment 38 and an end of frame 
(EOF) 39. 

20 Description of packet switching according to the invention. 

In a normal 'layer 3' router, all packets forwarded to the router are routed either to a 
specific destination if the IP address is known or to one of a multiplicity of default 
routers if the IP (network) destination address is unknown. 

25 

The invention has broadly two aspects. One is the provision of a new manner of 
organising the routing of packets at the edge of a network. A further aspect of the 
invention is the organisation of a switch for this purpose. 

30 In particular, it is intended that a packet should be 'routed' locally in an edge switch if 

possible and the packet should be switched at the data link layer (layer 2) to a core 
router if it be not possible to route the packet locally. In effect the core router will be a 
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default router but packets will be switched to it by means of layer 2 (media access 
control) switching rather than at the logical (layer 3) level. 

Figure 4 illustrates part of a network organised according to the present invention and 
5 including an edge switch which is organised to act as a local router in accordance with 

the invention. 

The network shown in Figure 4 includes a 'core 5 router 50, which may be a router 
organised on the lines of the router described with reference to Figure 2. The core 

10 router 50 is coupled by an up-link 51 to port A of an 'edge switch' constituted by a 

switch which is capable of layer 2 and layer 3 switching as described with reference to 
Figure 1. Ports B and C on the edge router are coupled to a multiplicity of data 
terminal entities organised into a multiplicity of subnets; one of these subnets is shown 
as subnet 1 and includes a terminal PCI; another subnet is shown as subnet 2 and 

15 includes a terminal shown as PC2. Subnet 1 is regarded as being on 'VLAN t- and 

subnet 2 is regarded as 'VLAN 2\ The core router may be coupled to other networks 
or subnets; it is shown as connected to a subnet 3 which includes a terminal PC3. 

Part of the database in the edge switch, as shown in Figure 1, is a table of MAC 
20 addresses and corresponding destination ports. The table includes for each entry an 

additional bit field provided to indicate whether a received packet is to be subjected to 
a layer 3 look-up and switched accordingly, and this takes precedence over the 
destination port. The core router's MAC address is entered into this table so that all 
packets with this destination address will be forwarded to the layer 3 switch. This 
25 causes all packets destined for the core router to be sent to the layer 3 switch inside the 

edge switch. 

The various terminals will send ARP packets to determine to resolve the MAC address 
of the core router. The terminal can use this MAC address as the destination address 
30 for the next hop for packets destined for other sub-nets. 
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The layer 3 switching facility within the edge switch will contain at least one and 
possibly two types of routing information. This information may be in a single table or 
split into several tables. 

5 The first type of routing information comprises the known routes. This is a list of all 

known destination addresses along with the information required to route the packet. 
The routing table is programmed with all the entries that are local to the edge switch. 
This information is obtained from the core router and in the example above this would 
be all the network addresses on subnet 1 and subnet 2. The source address entered in 
10 the routed packet should be the same as the source address of the core router. 

A second type of routing information comprises a default route which can be used if 
the address of the data packet does not match any of the entries in the routing table. 

15 The embodiment to be described is implemented in hardware. The switch-thus 

requires a mode to use the result of the layer 2 look-up if the layer 3 look-up fails. For 
this purpose no default route would be programmed. If the layer 3 does not match any 
of the known routes, the packet is layer 2 switched to the core router 50 using the 
result of the layer 2 look-up. 

20 

If on the other hand the invention is implemented in software, a default route table can 
be programmed with a default route (to router 50) that matches all packets. The source 
address to be inserted in the packet will be the MAC address of the edge switch and 
such packets will be routed to the core router. 

25 

Figure 8 illustrates (in greatly simplified form) a routing table for the edge switch 52. 
The network addresses for PCI and PC2 are associated with a port identification, 
usually a number but herein shown as 'B' and 'C as well as the relevant MAC address 
data. If there is a default route (i.e. for a destination other than the local edge ports B 
30 and C) the packet is sent to the router 50. 
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It is important to note that the edge switch is not intended to provide routing for any 
device which is not directly reachable by way of its 'local' ports (e.g. B and C). It 
provides 'opportunistic' routing for packets which pass between devices connected to 
the edge switch 52 but need routing rather than bridging because they are on different 
5 sub-nets. Thus it is not intended to provide any other routing e.g. for packets which are 

destined for devices connected to other edge switches (not shown) connected to the 
router 50. 

Figures 5 and 6 illustrate the differences between ordinary layer 2 and layer 3 
10 switching and the switching which is employed in the present invention. 

In the ordinary scheme shown in Figure 5, a packet is received by the edge switch. A 
layer 2 address look-up is performed. The packet will be switched at layer 2 if an 
address match is found. The other possibility for the layer 2 look-up result is to 
15 forward the packet to a layer 3 look-up. Here there are two possibilities. If the layer 3 - 

destination or the next hop is found, according to the routing tables, the packet will be 
routed. If the look-up fails then the packet is passed to the CPU. 

Figure 6 illustrates one implementation of the present invention, particularly suitable 
20 for a hardware version. The first stage is similar, in that the packet will be switched at 

layer 2 or will be forwarded to the layer 3 look-up. If the layer 3 destination is found 
by the layer 3 address look-up, then the packet will be routed. If however the layer 3 
look-up fails (i.e. the destination is not local) the packet will be switched to the core 
router 50 by means of a layer 2 look-up (either using a new layer 2 look-up or storing 
25 the original). 

Figure 7 illustrates a basic network scenario. This resembles Figure 4 except that 
members of VLAN 1 such as PC4 are connected to the router 50. In such an 
implementation, a packet originating at PCI and destined for PC2 on VLAN 2 will 
30 arrive at the edge switch 52 and will be routed locally and not forwarded to the router 

50. A packet originating at PCI on VLAN 1 and destined for PC3 on VLAN 3 will be 
switched to the router 50 and routed at that router to PC3. Packets originating at PC3 
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and destined for PCI will be routed by the router 50 and then switched by the switch 
52. Packets originating at or destined for PCI and destined for or originating at PC4 
as the case may be will be switched. 



